Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
File: XFe2FhFxnsfI4AErGv9-gfx2ib0.mft (raw, json)
Hash identifier: QHUnslE/u4aHXoFpEiCnkIjmi1u3PbxD3zC2/d9Td5o=
Subject key identifier: 8A:51:9F:8C:4B:43:7F:7D:CE:60:2A:FA:B5:59:1E:13:94:3A:7E:1F
Authority key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
Certificate issuer: /CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Certificate serial: 0198744FFF048762939E3D44BA2604148735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
Manifest number: 1012
Signing time: Mon 04 Aug 2025 09:00:56 +0000
Manifest this update: Mon 04 Aug 2025 09:00:56 +0000
Manifest next update: Tue 05 Aug 2025 09:00:56 +0000
Files and hashes: 1: 736mr1KkVtoBPW1oR7owGe-ullo.roa (hash: uR2lVV+jre6sPLOQey9198pgiqdr//RLVlkZmwpBaQw=)
2: XFe2FhFxnsfI4AErGv9-gfx2ib0.crl (hash: bNMrm0mDwPe+RsBk7MN2g1oYaGa+HF5JEo1Xg5MKE70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ff:04:87:62:93:9e:3d:44:ba:26:04:14:87:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Validity
Not Before: Aug 4 09:00:56 2025 GMT
Not After : Aug 5 09:00:56 2025 GMT
Subject: CN=8a519f8c4b437f7dce602afab5591e13943a7e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:27:5f:13:b0:74:d0:71:a3:ac:93:17:60:
4c:98:67:f0:c1:76:8f:a5:6f:b1:25:97:b0:9b:95:
82:9d:16:8e:9a:3a:cb:fe:d7:e9:99:57:80:27:8d:
b0:84:6f:8b:74:16:82:05:f1:2a:91:15:87:60:14:
c0:b6:84:b9:36:4e:93:19:ce:5a:f8:1f:8e:41:3d:
25:90:06:66:bd:7e:d6:e2:ec:11:40:e1:16:2f:c6:
40:aa:9c:43:3e:95:47:a6:47:45:b5:76:35:7a:cc:
ce:b8:ec:6c:10:58:48:4b:01:af:33:a5:53:09:e6:
ad:00:de:15:c2:d0:14:ed:04:75:23:bc:07:b4:29:
ea:c8:f3:af:41:9c:d7:65:e9:e6:37:26:13:55:56:
8f:75:2e:05:a3:43:31:1a:de:d3:53:1f:8b:4f:5b:
ed:34:9c:93:82:bd:03:45:d2:37:ac:b4:43:36:64:
18:e4:36:93:ff:93:9e:90:0a:83:2f:70:ac:f1:0d:
15:28:dc:dd:d7:24:0d:14:b7:c8:a5:72:a9:16:9f:
ce:70:0a:88:50:d2:bb:aa:39:65:f7:4a:d8:ea:36:
88:e3:bf:01:26:46:d6:14:d1:11:57:94:47:60:ba:
fa:2f:cc:a0:e2:27:9e:fa:dc:68:88:c1:00:d4:fc:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:51:9F:8C:4B:43:7F:7D:CE:60:2A:FA:B5:59:1E:13:94:3A:7E:1F
X509v3 Authority Key Identifier:
keyid:5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8d:db:ac:d0:29:9f:3c:05:94:fe:18:5b:36:ac:d6:c3:35:
67:25:7c:32:3c:1d:84:9d:55:2f:42:ca:1e:8d:d0:b0:73:aa:
4e:2e:b2:30:d7:52:b0:e0:ae:63:64:fc:9c:0e:d2:c6:40:8e:
ef:e2:9e:c3:2c:71:7d:ba:24:97:57:8f:27:fb:65:1d:96:08:
0e:21:8c:e3:ee:ac:46:2c:b5:ee:39:d6:25:a2:70:55:9c:0e:
2f:f1:43:87:80:62:b6:6f:49:41:1c:2a:98:9e:62:ca:a6:16:
ff:2b:e3:3b:94:f1:45:e9:e3:e2:95:bb:a2:1e:2d:c0:bc:4a:
41:1a:2e:1b:7c:47:e6:f6:0f:c9:b0:a1:70:fe:c8:6c:af:ef:
e7:96:95:fb:c6:61:44:36:5a:59:5f:c2:2b:0e:04:8a:3b:f2:
b2:ec:f9:b7:7e:ba:0e:39:78:ff:35:b2:73:69:a9:a7:94:f7:
ca:53:00:5e:3e:71:28:4f:3e:d3:36:46:4b:00:b5:56:4e:aa:
c0:41:e8:cc:e6:43:69:b6:99:56:a3:f4:f0:70:95:5d:b3:5b:
55:e4:e6:f9:d1:94:58:ce:38:b1:6e:d5:07:aa:f2:21:e9:35:
5f:40:fb:16:48:49:c6:a5:91:a6:b8:99:0b:14:8d:28:a4:14:
dd:23:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:30 2025 by rpki-client